OSDN Git Service
(root)
/
android-x86
/
external-ffmpeg.git
/ commitdiff
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
| commitdiff |
tree
raw
|
patch
| inline |
side by side
(parent:
258763a
)
avcodec/h264_ps: Fix runtime error: signed integer overflow: -1094995528 * 2 cannot...
author
Michael Niedermayer
<michael@niedermayer.cc>
Sun, 19 Feb 2017 21:54:30 +0000
(22:54 +0100)
committer
Michael Niedermayer
<michael@niedermayer.cc>
Sun, 19 Feb 2017 21:55:04 +0000
(22:55 +0100)
Fixes: 615/clusterfuzz-testcase-
5488002644049920
Found-by: continuous fuzzing process https://github.com/google/oss-fuzz/tree/master/targets/ffmpeg
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
libavcodec/h264_ps.c
patch
|
blob
|
history
diff --git
a/libavcodec/h264_ps.c
b/libavcodec/h264_ps.c
index
8218e3a
..
270d06b
100644
(file)
--- a/
libavcodec/h264_ps.c
+++ b/
libavcodec/h264_ps.c
@@
-468,7
+468,7
@@
int ff_h264_decode_seq_parameter_set(GetBitContext *gb, AVCodecContext *avctx,
sps->frame_mbs_only_flag = get_bits1(gb);
- if (sps->mb_height >= INT_MAX / 2) {
+ if (sps->mb_height >= INT_MAX / 2
U
) {
av_log(avctx, AV_LOG_ERROR, "height overflow\n");
goto fail;
}